> Markdown version of [/jobs/ext/2958071-cyber-soar-security-orchestration-automation-and-response-engineer-manager-consulting](https://www.wearedevelopers.com/jobs/ext/2958071-cyber-soar-security-orchestration-automation-and-response-engineer-manager-consulting). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber - SOAR (Security Orchestration, Automation and Response) Engineer - Manager - Consulting - **Company:** Ernst & Young LLP - **Location:** McLean, VA, United States (Remote available) - **Experience:** Expert - **Salary:** $173,900.0 - $290,100.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Application Frameworks, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Collaborative Software, Cyber Security, Computer Engineering, Continuous Integration, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Windows PowerShell, Secure Coding, Security Information and Event Management, Software Engineering, Systems Integration, Strategies of Testing, Software Vulnerability Management, Web Services, Scripting, Google Cloud, Cyber Threat Analysis, Cloudformation, Information Technology, Bicep, Microsoft Sentinel, Enterprise Integration, Cortex XSOAR Platform, Restful APIs, Terraform, Splunk, Software Version Control, Devsecops, Serverless Computing, Azure Resource Manager, Security Orchestration, Automation & Response - **Published:** September 17, 2026 - **Apply:** https://dejobs.org/x/x/3103ED546A6A43BCABC6B0BBF9CD0393/job/ ## About the Role * Strong leadership, structured problem-solving, and critical-thinking skills, with the ability to make sound decisions in complex client environments. * Deep knowledge of security operations and demonstrated ability to connect business objectives, operating processes, and technical architecture. * Ability to lead concurrent workstreams, manage ambiguity, prioritize effectively, and drive accountability across cross-functional teams. * Executive presence and strong written and verbal communication skills, including the ability to influence technical and non-technical stakeholders. * Demonstrated ability to design scalable integrations and automation solutions across complex enterprise environments. * Experience developing high-quality client deliverables, architecture documents, roadmaps, reports, proposals, and presentations. * Commercial awareness, including scope management, estimation, resource planning, risk management, and engagement economics. * Commitment to quality, continuous improvement, mentorship, and inclusive team leadership. To Qualify for the Role, You Must Have * A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, Management Information Systems, or a related field, and 6-10 years of relevant experience in security automation, SOAR engineering, security operations, cybersecurity engineering, or a related discipline. * Experience leading teams or workstreams responsible for the design and delivery of security automation or SOAR solutions in enterprise environments. * Hands-on experience with enterprise SOAR platforms such as Palo Alto Cortex XSOAR, Microsoft Sentinel Automation, Splunk SOAR, Google Security Operations, Tines, D3 Security, Swimlane, or comparable technologies. * Strong software development and scripting experience using Python, PowerShell, JavaScript, or other automation-focused languages. * Experience designing and consuming REST APIs, web services, SDKs, and custom integrations. * Strong knowledge of SOC processes, including alert triage, incident response, threat detection, threat intelligence, vulnerability management, and case management. * Experience integrating security technologies across SIEM, EDR/XDR, IAM, email, network, cloud, vulnerability management, threat intelligence, ticketing, and collaboration platforms. * Understanding of infrastructure, networking, operating systems, and major cloud platforms, including Microsoft Azure, Amazon Web Services, and Google Cloud Platform. * Experience designing, testing, troubleshooting, operationalizing, and governing automation workflows in production environments. * Knowledge of secure development practices, version control, testing methodologies, CI/CD concepts, and software engineering standards. * Ability to lead client-facing engagements, manage delivery risks, and communicate recommendations to senior stakeholders. * Relevant industry or platform certifications, or the ability to obtain an applicable certification after employment. Ideally, You'll Also Have * Experience architecting enterprise-scale SOAR implementations and establishing security automation programs or centers of enablement. * Experience developing reusable automation frameworks, advanced orchestration solutions, and platform governance standards. * Familiarity with Infrastructure as Code technologies such as Terraform, ARM templates, Bicep, or CloudFormation. * Experience with DevSecOps, CI/CD pipelines, cloud-native automation, containers, and serverless technologies. * Experience defining automation use-case portfolios, prioritization criteria, value metrics, and adoption roadmaps. * Ability to translate operational requirements into target-state architectures, implementation roadmaps, estimates, and business cases. * Experience with consulting engagement methodologies, proposal development, statements of work, and executive-level presentations. * Familiarity with AI-assisted security operations, generative AI use cases, and responsible automation controls. What We Look For We seek experienced leaders with a passion for cybersecurity engineering and automation, along with a record of delivering complex technical solutions and trusted client outcomes. Ideal candidates demonstrate strong judgment, learning agility, technical credibility, and the ability to lead diverse teams in a fast-paced consulting environment. We value professionals who can connect strategy to execution, improve security operations through automation, and help clients strengthen cyber resilience through modern engineering practices. ## Description * Lead end-to-end SOAR and security automation engagements, from discovery and strategy through architecture, implementation, testing, deployment, and operational transition. * Advise clients on automation strategy, operating models, governance, platform selection, capability roadmaps, and opportunities to improve Security Operations Center (SOC) effectiveness. * Own solution architecture and delivery quality for enterprise SOAR implementations, ensuring designs are scalable, secure, maintainable, and aligned with client requirements. * Direct the design and development of playbooks that automate incident triage, enrichment, investigation, containment, remediation, case management, and reporting activities. * Oversee integrations across SIEM, EDR/XDR, IAM, cloud security, threat intelligence, vulnerability management, email security, network security, ticketing, and collaboration platforms. * Provide technical oversight for custom integrations, APIs, connectors, reusable frameworks, and cloud-native automation capabilities. * Facilitate executive briefings, architecture reviews, technical workshops, stakeholder interviews, and requirements sessions; translate complex findings into clear recommendations and implementation plans. * Manage engagement scope, workplans, risks, dependencies, staffing, financial performance, and delivery milestones while maintaining service quality and client satisfaction. * Establish engineering standards, governance controls, testing practices, documentation expectations, and production support models for automation solutions. * Lead, coach, and develop multidisciplinary teams; review work products, provide actionable feedback, and create an inclusive, collaborative environment. * Identify follow-on opportunities, contribute to proposals and statements of work, support solution development, and help grow the security automation practice. * Maintain awareness of emerging threats, AI-assisted security operations, automation technologies, cloud-native security capabilities, and evolving SOAR platforms. ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)